
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: JG4BBxOsSZ+p6sPlTIQiJyu5vKa+dsvITDGBswaPK2A=
Subject key identifier: 0D:E5:EF:DA:5C:FA:F9:B7:9D:8F:60:97:A8:48:67:A9:0D:50:F4:C3
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 0198D4047CD1816A93A503D32C046E320B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0597
Signing time: Fri 22 Aug 2025 23:02:00 +0000
Manifest this update: Fri 22 Aug 2025 23:02:00 +0000
Manifest next update: Sat 23 Aug 2025 23:02:00 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: /Ganfa8YUPZSx4wn32t/7hZ/3xQCi71D9nmaE5D8v7g=)
2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7c:d1:81:6a:93:a5:03:d3:2c:04:6e:32:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Aug 22 23:02:00 2025 GMT
Not After : Aug 23 23:02:00 2025 GMT
Subject: CN=0de5efda5cfaf9b79d8f6097a84867a90d50f4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:da:3d:e1:b1:ce:e0:95:f9:3e:17:85:08:
1d:0f:db:aa:95:d9:7c:ec:3a:8b:f8:89:bc:0e:fe:
00:2e:53:02:ba:5a:6c:91:33:fd:fa:7a:bc:23:4e:
e9:de:12:0f:af:56:a6:47:9a:08:22:59:d2:35:94:
3c:6c:90:50:55:c9:2d:cd:0a:e6:91:58:17:62:a4:
34:3b:1b:99:02:af:e0:9c:3f:98:33:da:8a:54:3a:
6e:73:07:0b:f4:21:6d:85:90:ac:d2:21:3f:a3:11:
54:4f:3b:22:3a:59:5f:2a:9b:3b:8d:2f:32:cd:1d:
3f:fb:57:8d:f5:26:d1:5b:9d:08:1e:0d:5e:ba:04:
38:0d:3d:b2:22:92:74:91:fe:ca:f0:c2:44:3e:eb:
5f:44:ec:63:0e:e8:10:92:ce:ad:78:2b:5e:81:3a:
3a:1f:8f:ef:12:14:db:22:51:5e:28:2a:94:bf:aa:
ac:22:13:be:a0:2c:bb:fc:40:20:5e:45:53:7b:3d:
45:8d:90:ef:1e:09:63:af:cd:88:43:46:54:48:60:
01:b8:13:b2:84:ed:7b:37:88:54:6a:45:05:a8:0c:
5a:96:83:83:41:18:fa:5c:2b:de:2a:00:42:06:18:
c9:48:26:38:2d:e7:62:e6:fb:6f:72:7f:e7:41:da:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:EF:DA:5C:FA:F9:B7:9D:8F:60:97:A8:48:67:A9:0D:50:F4:C3
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7d:ae:92:f2:7e:29:05:80:f0:e7:03:79:cb:0a:5b:46:0c:
5d:e9:8f:f4:da:84:9b:7a:13:2b:a2:1b:94:ed:9f:74:84:43:
40:d9:6b:f7:af:cc:ce:b9:c7:68:99:b0:b8:78:c2:57:90:58:
3c:b5:36:82:a6:07:36:f0:65:57:c4:2a:fa:46:26:9b:5f:89:
8f:c3:f3:f8:0d:7c:eb:b2:0e:1c:ab:73:a9:fe:fa:87:a4:5f:
b2:44:94:86:4a:d5:b1:58:9a:78:2a:6b:ff:52:9a:a1:5b:41:
28:84:ef:a0:39:0f:3f:ac:c2:d6:97:37:44:e1:ec:b3:9a:bc:
b4:a7:ff:aa:61:59:9c:e3:6b:86:9c:16:45:e2:f8:88:49:b4:
d8:dd:ec:c1:e6:ab:c4:70:aa:7a:13:82:26:fc:db:6d:01:4e:
22:b9:38:3d:fd:95:3f:89:88:79:91:d0:df:fe:41:c7:99:1b:
9a:b2:f3:3c:6f:2b:91:33:cb:70:57:37:ef:78:37:69:1e:6e:
37:60:4d:04:09:91:c2:1a:50:89:ab:89:cc:49:0d:90:2e:56:
cf:f3:ca:aa:ed:0e:9b:5b:a5:68:62:58:35:36:26:54:ad:23:
7c:e4:0b:d1:17:dd:6c:9c:9c:21:f2:7d:13:9f:1c:3d:8f:71:
a2:88:a7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:55 2025 by rpki-client